Federal investigators found a hidden backdoor in a widely used patient monitor that silently shipped patient data to a hard-coded overseas address - and a US state has since ordered agencies to inventory Chinese-made networked medical devices. Dental practices run connected devices too: intraoral sensors,...
Every dental practice runs on messages: a texted appointment reminder, an emailed treatment plan, a quick photo of an X-ray sent to a specialist. But standard SMS and ordinary email were never built to carry health information, and a single misdirected message can become a...
The X-ray machine in your operatory is no longer a standalone box that spits out a picture. It is a networked node that generates protected health information, writes to a server, and depends on backups, uptime and security you probably never think about. Here is...
CISA has added an actively exploited N-able N-central flaw to its Known Exploited Vulnerabilities catalog after attackers used it to take over the remote-management servers that IT providers use to run their clients' networks. Your dental practice may never have heard of N-central, and that...
Security researchers uncovered roughly 18 malicious npm packages that quietly delivered a cross-platform Remote Access Trojan. Here is why the same class of software supply-chain attack threatens your dental practice — and how to defend against it....
CISA has published back-to-back advisories on MikroTik RouterOS flaws that can leak a router's VPN keys and let attackers brute-force their way in, with no patch yet available. Here is what it means for the router quietly humming in your dental practice and how to...
Windows 10 stopped getting security updates in October 2025. If a single reception, operatory, or imaging PC in your practice is still running it, you are now storing patient data on a machine Microsoft no longer patches — and that is a compliance problem, not...
Your front desk is probably already pasting patient notes into ChatGPT. Here is why that is a reportable privacy disclosure under HIPAA and Ontario's PHIPA — and how to let your team use AI safely....
The breach at Abbott Laboratories didn't start with malware. It started with a phone call to a real employee. For dental practices, that's the uncomfortable part — because your weakest security control answers the phone at the front desk....
A medical billing vendor breach exposed 1.26 million patients without a single encrypted file. Here is what the MCBS incident and the rise of extortion-only attacks mean for dental practices that outsource billing....
A cyberattack on healthcare billing software vendor Craneware exposed how a breach at a trusted third party can put your practice's data at risk, even when your own network did nothing wrong....
The Qilin ransomware gang has claimed an attack on US dental referral service 1-800-Dentist, threatening to leak sensitive data. Here is what the alleged breach means for dental practices — and how to harden your own defences....
Trend Micro researchers documented a Russian-speaking actor using a jailbroken Google Gemini CLI to run a command-and-control botnet. The showcase victim was a dental clinic: eight workstations controlled, and access to the OpenDental database....
When Texas ordered state agencies to audit networked medical devices for cybersecurity risk, it put a spotlight on a problem most dental practices have never considered: the imaging sensors, monitors, and smart hardware on your network are full computers, and almost nobody patches, segments, or...
The Medtronic breach that exposed 3.8 million people did not come through an implant or an imaging unit - it came through a manufacturer's corporate IT systems. That is the lesson most dental practices miss: your patients' data sits with your vendors, and your networked...
